3010 matches found
CVE-2026-62911 Microsoft Exchange Server Elevation of Privilege Vulnerability
...
CVE-2026-62911 Microsoft Exchange Server Elevation of Privilege Vulnerability
...
EUVD-2026-56688
Authentication bypass by capture-replay in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...
CVE-2026-62911
Technical details (affected software, vulnerable component, root cause, and fixes) are not publicly available in the provided documents. Monitor for updates.
EUVD-2026-56447
Server-side request forgery ssrf in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...
CVE-2026-65813 Microsoft Exchange Server Elevation of Privilege Vulnerability
...
CVE-2026-65813 Microsoft Exchange Server Elevation of Privilege Vulnerability
...
CVE-2026-65813
SSRF in Microsoft Exchange Server lets an authenticated attacker escalate privileges over the network. NVD scores it HIGH (CVSS 8.8), while Microsoft's CNA rates it MEDIUM (6.5) with confidentiality impact only. Microsoft has released fixes: KB5121573 (Exchange Server Subscription Edition RTM), K...
CVE-2026-62914 Microsoft Exchange Server Spoofing Vulnerability
...
CVE-2026-62915
Technical details about this CVE are not publicly provided in the supplied documents. Monitor for updates from vendors and security feeds for affected product, component, and remediation.
CVE-2026-62914
CVE-2026-62914 is a Microsoft Exchange Server vulnerability involving improper neutralization of input during web page generation (XSS) that allows an authorized attacker to spoof over the network. Affected product: Microsoft Exchange Server. Core issue: cross-site scripting due to input handling...
CVE-2026-62915 Microsoft Exchange Server Security Feature Bypass Vulnerability
...
CVE-2026-62915 Microsoft Exchange Server Security Feature Bypass Vulnerability
...
EUVD-2026-56417
Missing authorization in Microsoft Exchange Server allows an authorized attacker to bypass a security feature over a network...
EUVD-2026-56416
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Exchange Server allows an authorized attacker to perform spoofing over a network...
CVE-2026-62914 Microsoft Exchange Server Spoofing Vulnerability
...
CVE-2026-62912
Microsoft Exchange Server is affected by CVE-2026-62912, describing a deserialization of untrusted data vulnerability that allows an authorized attacker to trigger a denial of service over the network. The CVSS 3.1 base score is 6.5 (Medium) with network attack vector, low attack complexity, priv...
CVE-2026-62913 Microsoft Exchange Server Remote Code Execution Vulnerability
...